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IN THE CLAIMS 

1, (currently amended) An information processing 

apparatus for transmitting — carrying out secure transmission of 

content to another apparatus via over a network, said 

information processing apparatus comprising: 

an encryption unit operable to encrypt the content; 

an authentication unit operable to perform — a-R — receive 

authentication procedure with information from the another 

apparatus when the another apparatus requests permission to 
receive the encrypted content , and to determine whether the 

authentication information is valid 7 said authentication 

procedure providing an authentication result ;a transmitter 

operable fee transmit a decryption key for decrypting the 

encrypted content fee fe-^e another apparatus based e-R said 

authentication result ; 

a first obtaining unit operable to obtain identification 
information of the another apparatus based — eft — said — from the 

authentication result information when the authentication 

information is valid and to determine whether the identification 
information of the another apparatus is already stored in a 
storage unit ; 

a transmitting unit operable to transmit a decryption key 
to the another apparatus when the authentication information is 
valid, the decryption key being needed to decrypt the encrypted 
content ; and 

a first counting unit operable to increment a count of a 

total number of apparatuses units desiring — to receive the 

encrypted content based — eft — said — by one when the identification 
information of the another apparatus is not already stored in 
said storage unit and the count of the total number of 
apparatuses is less than a maximum value ; 

said e — storage unit being operable to store said — the 
identification information of the another apparatus when the 
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identification information of the another apparatus is not 
already stored in said storage unit y — anda controller operable to 

control a total number e£ units approved t-e receive the 

encrypted — content — based — — said — total — number — &€ — units — desiring 
tre — receive the — encrypted content . 

2. (currently amended) An information processing 

apparatus according to Claim 1 , wherein the another apparatus is 
operable to transmit the encrypted content to a plurality of 
further apparatuses over the network, and said information 
processing apparatus further comprise s ing : 

a second obtaining unit operable to obtain a first value 
and a second value from the another apparatus when the 
authentication information is valid, the first value being a 
number of apparatuses in the plurality of further apparatuses 
additional — units — desiring — that are newly requesting to receive 
the encrypted content^ and the second value being a total number 
of apparatuses in the plurality of further apparatuses' feea — the 
another apparatus based on said authentication result ; and 

a second counting unit operable to increment the count a— of 
the total number of apparatuses units — &4 — th-e — another — apparatus 
desiring — to receive the encrypted content based — a** — said — number 
e£ — additional — units by the first value when (i) the sum of the 
first value and the count of the total number of apparatuses is 
at most equal to the maximum value and (ii) the identification 
information of the another apparatus is already stored in said 
storage unit, 

said second counting unit being operable to increment the 
count of the total number of apparatuses to receive the 
encrypted content by the second value when (i) the sum of the 
second value and the count of the total number of apparatuses is 
at most equal to the maximum value and (ii) the identification 
information of the another apparatus is not already stored in 
said storage unit . 
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3. (currently amended) An information processing 
apparatus according to Claim 1, further comprising: 

an information updating unit operable to delete said — the 
identification information stored in said storage unit and to 
reset said — the count of the total number of apparatuses units 
approved — to receive the encrypted content when said decryption 
key is changed. 

4. (currently amended) A method for t ran smit ting carrying 
out secure transmission of content from an information 
processing apparatus to another apparatus -v-ira — over a network, 
said method comprising: 

encrypting the content; 

receiving performing — a^ — authentication procedure — with — the 
information from the another apparatus when the another 
apparatus requests permission to receive the encrypted content— 

said authentication procedure producing a-n authentication 

result ; transmitting a decryption key &en£ decrypting fe**e 

encrypted content t-e fc-he another apparatus based eft said 

authentication result ; 

determining whether the authentication information is 
valid; 

obtaining identification information of the another 
apparatus based on — said from the authentication information when 
the authentication information is valid rcsult ; 

determining whether the identification information of the 
another apparatus is already stored; 

transmitting a decryption key to the another apparatus when 
the authentication information is valid, the decryption key 
being needed to decrypt the encrypted content; 

incrementing a count ing of a total number of apparatuses 
units — desiring to receive the encrypted content based — e-R — said by 
one when the identification information of the another apparatus 
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is not already stored and the count of the total number of 
apparatuses is less than a maximum value ; and 

storing said — the identification information of the another 
apparatus when the identification information of the another 
apparatus is not already stored- ; — andcont rolling — a — total — number 
of units — approved to — receive — the — encrypted — content — based on — said 
total number of units desiring to receive the encrypted content . 

5. (currently amended) A recording medium having recorded 

thereon a program for transmitting executing a method for 

carrying out secure transmission of content from an information 
processing apparatus to another apparatus vie — over a network, 
said program m ethod comprising: 

encrypting the content; 

receiving performing — etn — authentication procedure — with — fehe 
information from the another apparatus when the another 
apparatus requests permission to receive the encrypted contenty- 

said authentication procedure producing afi authentication 

result ; transmitting a decryption key fene decrypting fe^e 

encrypted content fee fefee another apparatus based e« said 

authentication result ; 

determining whether the authentication information is 
valid; 

obtaining identification information of the another 
apparatus based on — said from the authentication information when 
the authentication information is valid rcsult ; 

determining whether the identification information of the 
another apparatus is already stored; 

transmitting a decryption key to the another apparatus when 
the authentication information is valid, the decryption key 
being needed to decrypt the encrypted content; 

incrementing a countif^g of a total number of apparatuses 
units — desiring to receive the encrypted content based — e-R — said by 
one when the identification information of the another apparatus 



Application No.: 09/900,584 Docket No.: SONYJP 3.0-187 

is not already stored and the count of the total number of 
apparatuses is less than a maximum value ; and 

storing said the identification information of the another 
apparatus when the identification information of the another 
apparatus is not already stored- ; — andcon trolling — a — total — number 
of units — approved to — receive — the — encrypted — content — based on said 
total number of units desiring to receive the encrypted content . 

6. (currently amended) An information processing 

apparatus for carrying out secure receiving of content from a 
first apparatus v4ra — over a first network and for carrying out 
secure transmission of the content to a second apparatus over a 
second network , said information processing apparatus 
comprising: 

a first transmit t ing es unit operable to transmit to the 
first apparatus a request for permission to receive the content; 

a first authentication unit operable to perform a first 

authentication procedure with the first apparatus-? said — first 

authentication procedure producing a first authentication 

result ; 

a receiver operable to receive a first decryption key from 
the first apparatus when the first authentication procedure is 
successful — a first — decryption — key — te^r — decrypting — the — c o ntent 
based — eft — said — first — authentication — result ;a — second — transmitter 

operable te transmit the content received from — the first 

apparatus — to a — second apparatus via a second network; 

a decryption unit operable to use the first decryption key 
to decrypt encrypted content received from the first apparatus; 

an reencryption unit operable to reencrypt the decrypted 
content ; 

a second authentication unit operable to perform — a — second 
receive authentication procedure — with — said — information from the 
second apparatus when a request for permission to receive the 
content is made from said the second apparatus and to determine 
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whether the authentication information is valicb said — second 

authentication procedure producing a second authentication 

result ;a third transmitter operable fee transmit a second 

decryption — key — fee — said — second — apparatus — based — or — said — second 
authentication — result ; 

a first obtaining unit operable to obtain identification 
information of said — the second apparatus based — aft — said — second 
from the authentication information when the authentication 
information is valid and to determine whether the identification 
information of the second apparatus is already stored in a 
storage unit result ; 

a second transmitting unit operable to transmit a second 

decryption key to the se con d apparat u s when th. e_ au t he n tica t ion 

information is valid, the second decryption key being needed to 
decrypt the reencrypted content; and 

a first counting unit operable to increment a count of a 
number of apparatuses units — desiring — to receive the reencrypted 
content based on — said by one when the identification information 
of the second apparatus is not already stored in said storage 
unit and the count of the total number of apparatuses is less 
than a maximum value ; 

said a — storage unit being operable to store said — the 
identification information of said second apparatus when the 
identification information of the second apparatus is not 
already stored in said storage unit -; — anda — controller — operable — fee 
control — a — number — e-f — units approved — fee — receive — feh-e — content — based 
eft — said number of units — desiring — fee — receive — fe^he — content . 

7 . (cancelled) 

8. (currently amended) An information processing 
apparatus according to Claim 6, further comprising: 

a fourth — third transmit t ing es unit operable to transmit^ 
said — to the first apparatus, the count of the number of 
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apparatuses unito — dcoiring — to receive the content — fee — fehe — first 
apparatus based on said firot authentication result; 

e — second — obtaining — unit — operable — fee — obtain — a — number — 

additional units desiring — fee receive fehe content from — said 

second apparatus based on said second authentication result; — emd: 

a — second — counting — unit — operable — fee — count — a — total — number — e-f- 
units — e-f — said — second — apparatus — desiring — fee — receive — fehe — content 
based on said number of additional units . 

9. (currently amended) An information processing 
apparatus according to Claim 6, further comprising: 

an information updating unit operable to delete said — the 
identification information stored in said storage unit and to 
reset said the count of the number of apparatuses units — approved 
to receive the reencrypted content when said second decryption 
key is changed. 

10. (currently amended) A method for carrying out secure 
receiving of content if* — af* — information processing — apparatus from 
a first apparatus ^4ra — over a first network and for carr yi ng out 
secure transmission of the content to a second apparatus over a 
second network , said method comprising: 

transmitting to the first apparatus a request for 
permission to receive the content; 

performing a first authentication procedure with the first 
apparatus to obtain a first authentication result ; 

receiving a first decryption key from the first apparatus a- 
first — decryption — — fe^t? — decrypting — feke — content — based — en — said 

when the first authentication procedure is 

successful re suit ; transmitting fehe content received from feh-e 

first apparatus to a second apparatus via a — second network; 

decrypting, using the first decryption key, encrypted 
content received from the first apparatus; 

reencrypting the decrypted content; 
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receiving performing — a — second authentication procedure — with 
said — information from the second apparatus when a reguest for 
permission to receive the content is made from said — the second 

apparatusT said occond authentication procedure producing a 

second authentication result ; 

determining whether the authentication information is 

valid; transmitting a second decryption k^y fee said second 

apparatus based on said second authentication result; 

obtaining identification information of said — the second 

apparatus based e-R said second from the authentication 

information when the authentication information is valid result ; 

determining whether the identification information of the 
second apparatus is already stored; 

transmitting a second decryption key to the second 
apparatus when the authentication information is valid, the 
second decryption key being needed to decrypt the reencrypted 
content ; 

incrementing a count ing of a number of apparatuses units 
desiring to receive the reencrypted content based — @f* — said by one 
when the identification information of the second apparatus is 
not already stored in said storage unit and the count of the 
total number of apparatuses is less than a maximum value ; 

storing said — the identification information of said — the 
second apparatus when the identification information of the 
second apparatus is not already stored -? — andcont rolling — a — number 
of units — approved to — receive the — content based on said number of 
units — desiring to — receive — the — content . ' 

11. (currently amended) A recording medium having recorded 
thereon a program for executing a method for carrying out secure 
receiving of content inn — a*i — information processing apparatus from 
a first apparatus *?4r€t — over a first network and for carrying out 
secure transmission of the content to a second apparatus over a 
second network ; said program method comprising: 
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transmitting to the first apparatus a request for 
permission to receive the content; 

performing a first authentication procedure with the first 
apparatus to obtain a — first authentication result ; 

receiving a first decryption key from the first apparatus a 
first — decryption — key — fen? — decrypting — fe-h-e — content — based — en — said 

when the first authentication procedure is 

successful result ; transmitting t-he content received from t-h-e 

first apparatus to a — second apparatus via a — second networks- 
decrypting, using the first decryption key, encrypted 
content received from the first apparatus; 
reencrypting the decrypted content; 

receiving performing — a — second authentication procedure — with 
said — information from the second apparatus when a request for 
permission to receive the content is made from said — the second 

apparatusT said second authentication procedure producing a 

second authentication result ; 

determining whether the authentication information is 

valid; transmitting a second decryption key fee said second 

apparatus based on said second authentication result; 

obtaining identification information of said — the second 

apparatus based &n said sec ond from the authentication 

information when the authentication information is valid result s- 
determining whether the identification information of the 
second apparatus is already stored; 

transmitting a second decryption key to the second 
apparatus when the authentication information is valid, the 
second decryption key being needed to decrypt the reencrypted 
content ; 

incrementing a count ing of a number of apparatuses units 
desiring to receive the reencrypted content based on — said by one 
when the identification information of the second apparatus is 
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not already stored in said storage unit and the count of the 
total number of apparatuses is less than a maximum value ; 

storing said — the identification information of oaid — the 
second apparatus when the identification information of the 
second apparatus is not already stored? — andcont rolling — a — number 
e-£ — unito — approved — fe-e — receive — the — content — based — e-R — oaid number — e-# 
units — desiring — to — receive — the — content . 

12. (new) An information processing apparatus 
according to Claim 1, wherein the authentication information 
includes first authentication information and second 
authentication information, and said authentication unit 
includes : 

a first authentication subunit operable to receive the 
first authentication information from the another apparatus when 
the another apparatus requests permission to receive the 
encrypted content, and to determine whether the first 
authentication information is valid; and 

a second authentication subunit operable to transmit a 
request for the second authentication information to the another 
apparatus when the first authentication information is valid, to 
receive the second authentication information from the another 
apparatus, and to determine whether the second authentication 
information is valid; 

said transmitting unit being operable to transmit the 
decryption key to the another apparatus when the second 
authentication information is valid. 

13. (new) An information processing apparatus 
according to Claim 6, wherein the authentication information 
includes first authentication information and second 
authentication information, and said second authentication unit 
includes : 

a first authentication, subunit operable to receive the 
first authentication information from the second apparatus when 
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the second apparatus requests permission to receive the content, 
and to determine whether the first authentication information is 
valid; and 

a second authentication subunit operable to transmit a 
request for the second authentication information to the second 
apparatus when the first authentication information is valid, to 
receive the second authentication information from the second 
apparatus, and to determine whether the second authentication 
information is valid; 

said second transmitting unit being operable to transmit 
the second decryption key to the second apparatus when the 
second authentication information is valid. 
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